CVE-2021-27193

Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation...

CVE-2021-27193

Netop Vision Pro (up to 9.7.1) suffers CVE-2021-27193 via the MChat plugin: an Access Control Error that lets an unauthenticated remote attacker read and write files in the remote work directory with System privileges, enabling privilege escalation and potential remote code execution. The Trellix...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

CVE-2021-27192

CVE-2021-27192 describes a local privilege escalation in Windows clients of Netop Vision Pro up to version 9.7.1 that allow a local user to gain administrator/System privileges while using the client. Connected sources detail multiple related issues in the same release family: CVE-2021-27192 ( pr...

Arbitrary File Read Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an arbitrary file reading vulnerability in the HIM basic management platform of Beijing CCTV Technology Co., Ltd, which can be exploited by an attacker to read all t...

Netop Vision 安全漏洞

Netop Vision Pro is a student monitoring system for teachers to facilitate student learning while using school computers. A security vulnerability exists in Netop Vision Pro. An attacker could exploit the vulnerability to replay network traffic...

Netop Vision 安全漏洞

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. A security vulnerability exists in Netop Vision Pro up to and including 9.7.1, which arises from a plaintext transfer of sensitive information allowing remote unauthenticated collection of...

Netop Vision 访问控制错误漏洞

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. An Access Control Error vulnerability in Netop Vision Pro 9.7.1 and prior versions can be exploited by an unauthenticated, remote attacker to read or write files on a remote computer,...

Netop Vision 安全漏洞

Netop Vision is an application from the Danish company Netop that provides a classroom management software. An elevation of privilege vulnerability exists in Netop Vision Pro 9.7.1 and earlier versions, which can be exploited by a local attacker to gain administrator privileges...

Catalog Traversal Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is a directory traversal vulnerability in the HIM base management platform of Beijing CCTV Technology Co., Ltd. that can be exploited by an attacker to traverse any...

Critical Security Bugs Fixed in Virtual Learning Software

Netop, the company behind a popular software tool designed to let teachers remotely access student computers, has fixed four security bugs in its platform. Researchers said that the critical vulnerabilities in the company’s Netop Vision Pro system could allow attackers to hijack school networks,...

Popular Netop Remote Learning Software Found Vulnerable to Hacking

Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. "These findings allow for elevation of privileges and ultimately...

Popular Netop Remote Learning Software Found Vulnerable to Hacking

Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. "These findings allow for elevation of privileges and ultimately...

Netop Vision Pro - Distance Learning Software is 20/20 in Hindsight

ARCHIVED STORY Netop Vision Pro – Distance Learning Software is 20/20 in Hindsight By Sam Quinn · MAR 21, 2021 · 27 MIN READ The McAfee Labs Advanced Threat Research team is committed to uncovering security issues in both software and hardware to help developers provide safer products for...

Netop Vision Pro - Distance Learning Software is 20/20 in Hindsight

ARCHIVED STORY Netop Vision Pro – Distance Learning Software is 20/20 in Hindsight By Sam Quinn · MAR 21, 2021 · 27 MIN READ The McAfee Labs Advanced Threat Research team is committed to uncovering security issues in both software and hardware to help developers provide safer products for...

Trend Micro Vision One: Tracking Conti Ransomware

We show how the Trend Micro Vision One platform can be used to track Conti ransomware...

Imperva recognized as a ‘Leader’ in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report

We are delighted to share that Imperva has been named a leader in The Forrester Wave: DDoS Mitigation Solutions, Q1 2021 report, a trusted source for technology buyers which helps security and risk professionals select the right vendor for their needs. You can download a copy of the report here...

Experts Find a Way to Learn What You're Typing During Video Calls

A new attack framework aims to infer keystrokes typed by a target user at the opposite end of a video conference call by simply leveraging the video feed to correlate observable body movements to the text being typed. The research was undertaken by Mohd Sabra, and Murtuza Jadliwala from the...

Weak Password Vulnerability in eVision Camera

Located in Shenzhen, Guangdong, China, E-Vision Technology is a company that mainly deals with digital cameras. A weak password vulnerability exists in EaseUS cameras, which can be exploited by an attacker to remotely connect to and control the camera...

CVE-2020-11180

Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...